Permissions and safety

What the app can do at first

The first sign-in grants reads only: your org, agents, templates and Credits. The first time the app needs more, for example to deploy an agent, write a template or move money, your client asks you to allow that too. You never grant more than the app has asked to use.

See or revoke access

Connected apps lists every app connected to your organization and what each one may do. Revoke one there to disconnect it. You can also open it from Settings → Account → Connected apps on the dashboard.

Writes ask first

Every tool that deploys, pauses, resumes or deletes an agent, spends Credits or moves money answers with a quote first and changes nothing. The app shows you the quote in plain words (what happens, the price a day in Credits, the risk) and asks you. Only after you agree does it call the same tool again to do it.

You:     Pause the Veranta momentum agent.
Claude:  This pauses "Veranta Momentum". Its open positions stay open. Pause it?
You:     Yes.
Claude:  Paused.

A few small writes happen right away, without a quote: saving or updating your own private template (save_brain, update_brain) and marking notifications read. The Tools page marks which tools ask first.

The app never confirms for you. If a write times out, EarnOrg tells the app to read the agent before it tries again, so a write that already ran is not sent twice.

Money moves only after you confirm

Two tools move money, and both quote first like any other write:

• fund_agent sends USDC from your EarnOrg wallet to one of your agents.
• withdraw_agent pauses an agent, closes its positions and sends everything it holds home to your EarnOrg wallet.

Money only moves between your EarnOrg wallet and your agents' wallets. No tool sends money to an outside address or exports a key. You can also fund an agent yourself: ask for its wallet address (get_agent) and send USDC from any wallet. A new agent's wallet starts empty.

An agent that still holds money is withdrawn before it can be deleted.

Text from other people

Results can carry text other people wrote: template descriptions, agent journals, notifications. A well-behaved app treats it as data, never as instructions.

See also Your keys and self-custody and Fund and run.